Analysis

  • max time kernel
    34s
  • max time network
    60s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29-10-2022 07:57

General

  • Target

    bfc275dabfd4187ead57c9f022afecaa274a124364d6620c5bce26dc0d95e7fd.exe

  • Size

    327KB

  • MD5

    b5067966a9d19a011ffec88b9fdef7ed

  • SHA1

    b682f8ffe80835db7fb18359d20065862a036155

  • SHA256

    bfc275dabfd4187ead57c9f022afecaa274a124364d6620c5bce26dc0d95e7fd

  • SHA512

    fea9a7d058df80b7d0035ec7daecf4df6999252e69a175e421b58b28116128668bb74592e656aedfabd82c254f5e7434dc50b8a0bd8d60db79fc9b58daba9a73

  • SSDEEP

    6144:Rr469uEo2S1YnQmCX492DkwNP3qpYFGgjwuBGVdLAt4ZHd2i3gjd+ZD/6FI:Rr4iu6/eIo4Rsw33AtsmQx

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\bfc275dabfd4187ead57c9f022afecaa274a124364d6620c5bce26dc0d95e7fd.exe
    "C:\Users\Admin\AppData\Local\Temp\bfc275dabfd4187ead57c9f022afecaa274a124364d6620c5bce26dc0d95e7fd.exe"
    1⤵
    • Loads dropped DLL
    PID:4944

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\TsuAB7B35F1.dll

    Filesize

    16KB

    MD5

    d1a62bb52370c59b497585e9d5f272b7

    SHA1

    aab8ff1fa943ba208b8da8ff53a5a7c34b3632f9

    SHA256

    27d6672d323ce93192bd94a69a3b037491a4f4c348fe63af86576b7a5b27f8b3

    SHA512

    958a3e8bdd15b935f9ea370d9baf0e6b7b63c3a5ee1e45cc33a54ed40b8adf50a562eba152dd10874d5f9c02bb71d2d1a72a77b53c3b8a491aa742e94f01718e

  • C:\Users\Admin\AppData\Local\Temp\{BF9F4E92-C042-4DF2-AF19-8860647C6C64}\Custom.dll

    Filesize

    12KB

    MD5

    2ce4f41a426b4dcfca6c417887f3d568

    SHA1

    580c572bd8b376db7f92de48cb38f8f6bb1d7bc0

    SHA256

    3cd486351e48c0e92114639e46fc38a92b118cc26d585f8b0e11f80bdedce85f

    SHA512

    b25c35ee97753766db76ac25de4781ef1ec12536c0b7bab3d92fcfa1ee4877e9fddeae6b7ba48c0dcf32ede1b96ebb859430ba1e31ebe98e5913dfa0b9086c4c

  • C:\Users\Admin\AppData\Local\Temp\{BF9F4E92-C042-4DF2-AF19-8860647C6C64}\_Setup.dll

    Filesize

    53KB

    MD5

    e9963b11b91214df0161e7d4eae1c0c5

    SHA1

    0cb524231227724be16254082a6ddca810d0d3ca

    SHA256

    54a8ce8680edb94d2804145f29f8e37331dc096f94e64982cbea58ce8a19d943

    SHA512

    b83e8ca91a415df3829a8c54ab4d7799b223fd0bf5f0aa98c49c088fa12a62eec9945692ea1db6d46ee46594891cc3fd1bf49080363e21e97a202ed7c6ab1d5a